VULNERABILITY INTELLIGENCE
CVE-2011-2599
CVSS score4.3 MEDIUM
EPSS probability0.80%
CISA KEVNot currently listed
Published2011-06-30
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
Google Chrome 11 does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor